# SBOM for shap 0.54.1 > A unified approach to explain the output of any machine learning model. The Python package shap 0.54.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/shap@0.54.1` - PyPI: https://pypi.org/project/shap/0.54.1/ - License: MIT License - Requires Python: \>=3.12 - Documentation: - Release Notes: - Repository: ## SBOMs ### shap-0.54.1-cp312-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shap/shap, workflow build\_wheels.yml). - [shap-0.54.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5cbed6df-f411-502b-9e62-850815ba1a4f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shap-0.54.1-cp312-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shap/shap, workflow build\_wheels.yml). - [shap-0.54.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/24dab0af-db88-5c52-b331-4bfb86e1dbbb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shap-0.54.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shap/shap, workflow build\_wheels.yml). - [shap-0.54.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d60a929b-c21e-5b16-8d9f-69b9f3e2bf07/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shap-0.54.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shap/shap, workflow build\_wheels.yml). - [shap-0.54.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/871b874b-d8e3-5769-9a98-cacad0e30339/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shap-0.54.1-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shap/shap, workflow build\_wheels.yml). - [shap-0.54.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/abcd506a-b167-544d-b344-7eec09a5ffb0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shap-0.54.1-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shap/shap, workflow build\_wheels.yml). - [shap-0.54.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6197ffa7-4dbc-5494-9f72-57053424aaa5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/shap@0.54.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/shap/0.54.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/shap/0.54.1